Overview

overview

8

Static

static

3

LiquidLaun...up.exe

windows10-2004-x64

7

LiquidLaun...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$TEMP/Micr...up.exe

windows10-2004-x64

6

$TEMP/Micr...up.exe

windows11-ltsc_2024-x64

6

liquidlauncher.exe

windows10-2004-x64

6

liquidlauncher.exe

windows11-ltsc_2024-x64

6

uninstall.exe

windows10-2004-x64

7

uninstall.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/07/2026, 13:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    $TEMP/MicrosoftEdgeWebview2Setup.exe
  • Size 1.6MB
  • Sample260710-rablsacy8s
  • SHA256 3c60fdbd71b468cf52fde6f780740a910c9d190e7023b1ac1217d427d794ccb1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalation

Malware Config

Signatures

  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 12 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Executes dropped EXE 15 IoCs
  • Loads dropped DLL 18 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 4 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Modifies data under HKEY_USERS 41 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs
  • System policy modification 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\MicrosoftEdgeWebview2Setup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2464
    • C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeUpdate.exe" /installsource taggedmi /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
      2⤵
      • Event Triggered Execution: Image File Execution Options Injection
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2944
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:3168
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2480
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4880
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:3760
        • C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe
          "C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateComRegisterShell64.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:400
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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
        3⤵
        • Checks system information in the registry
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:5676
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource taggedmi /sessionid "{11DAFE2D-2CA5-462C-91E3-AC1C35BC4434}"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:4940
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
    1⤵
    • Checks system information in the registry
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Suspicious use of WriteProcessMemory
    • System policy modification
    PID:5048
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjYxMDAuMTc0MiIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjE5MSIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJEYWR5IHN1cGVyIHBvd2VyZnVsIFBDIi8-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-PC9hcHA-PC9yZXF1ZXN0Pg
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:5532
    • C:\Windows\SysWOW64\wermgr.exe
      "C:\Windows\system32\wermgr.exe" "-outproc" "0" "5048" "1412" "1372" "1416" "0" "0" "0" "0" "0" "0" "0" "0"
      2⤵
      • System Location Discovery: System Language Discovery
      PID:3256
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:4764
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3E413E4-7354-48B2-B06E-956AC3507667}\MicrosoftEdge_X64_150.0.4078.65.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3E413E4-7354-48B2-B06E-956AC3507667}\MicrosoftEdge_X64_150.0.4078.65.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:2012
      • C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3E413E4-7354-48B2-B06E-956AC3507667}\EDGEMITMP_C608A.tmp\setup.exe
        "C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3E413E4-7354-48B2-B06E-956AC3507667}\EDGEMITMP_C608A.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3E413E4-7354-48B2-B06E-956AC3507667}\MicrosoftEdge_X64_150.0.4078.65.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
        3⤵
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Executes dropped EXE
        PID:1744
    • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
      "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuNjEiIHNoZWxsX3ZlcnNpb249IjEuMy4xOTUuNjEiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MTFEQUZFMkQtMkNBNS00NjJDLTkxRTMtQUMxQzM1QkM0NDM0fSIgdXNlcmlkPSJ7QUJEMzFGNjctMkFERi00MzVGLTgwMkQtRkNEMEE3NTI2NDc5fSIgaW5zdGFsbHNvdXJjZT0idGFnZ2VkbWkiIHJlcXVlc3RpZD0iezE3QjlBRTNCLUQ2MjYtNEE2Ri1BQzJDLTM1MDFBOTI4RTNCOH0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgbG9naWNhbF9jcHVzPSI4IiBwaHlzbWVtb3J5PSIxNiIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjI2MTAwLjE3NDIiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSIxOTEiIGlzX3dpcD0iMCIgaXNfaW5fbG9ja2Rvd25fbW9kZT0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IkRBRFkiIHByb2R1Y3RfbmFtZT0iRGFkeSBzdXBlciBwb3dlcmZ1bCBQQyIvPjxleHAgZXRhZz0iJnF1b3Q7YWI2bGhOSHM3cmVaQ0ZBWEJqemEvb1VpNVpONldvdlJJejlIamo1MjcrND0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTUwLjAuNDA3OC42NSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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_UDE9MTc4NDI5Njc2NSZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1HZDBnV0xmJTJmVHBKU3QwczJ0ZjEzYnlKblJ5NVNCJTJiYXU1UmxRT0hkQWFPRkxPZlA2OXdScGxnaUdWMFQ0YjBiajdRY09aQUpkd0VJaVFDSDlyTyUyZjV2QSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjE5NzY5NDI4OCIgdG90YWw9IjE5NzY5NDI4OCIgZG93bmxvYWRfdGltZV9tcz0iMTc1MTYiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1ODAxNjgyNTg0IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      PID:3468
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    • System policy modification
    PID:4972
    • C:\Windows\SysWOW64\wermgr.exe
      "C:\Windows\system32\wermgr.exe" "-outproc" "0" "4972" "880" "756" "872" "0" "0" "0" "0" "0" "0" "0" "0"
      2⤵
      • System Location Discovery: System Language Discovery
      PID:1284

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        msedge_7z.data
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\150.0.4078.65\Installer\msedge_7z.data
        • Size 5KB
        • SHA256 61e8b29c1cf9c8b5d49a0443e6a1467ef45c912caa0335a0523ee871c57b3bf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeUpdate.dat
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\EdgeUpdate.dat
        • Size 12KB
        • SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeComRegisterShellARM64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeComRegisterShellARM64.exe
        • Size 182KB
        • SHA256 e6e0518993662fe479b0f1d1f2f93c81a2b19c517a007b3ff5b8d1af5fdaf5c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeUpdate.exe
        • Size 201KB
        • SHA256 5cdf1c3c7f72120ca88145d38e48c9e1e6a6bd4ef43021193fd76d98d2f05496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateComRegisterShell64.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 215KB
        • SHA256 5f2a785aea8f1eafd0b473722c95b1178a684734da79be28d3a445470f810062
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateCore.exe
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\MicrosoftEdgeUpdateCore.exe
        • Size 262KB
        • SHA256 343d488e9ab2269d0679668a96671a2e05df83e729538762c6e37ecc6e1ef101
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NOTICE.TXT
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\NOTICE.TXT
        • Size 4KB
        • SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdate.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdate.dll
        • Size 2.1MB
        • SHA256 36bbe422572aa67cd61cb6accfc0d68a8fcd32d72405b504c2ff576bedb8e35c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_af.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_af.dll
        • Size 29KB
        • SHA256 480ce71f6a138cc3309fa1907f5f7a19e2299ec75820f7ead6c9f6f9144f33e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_am.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_am.dll
        • Size 24KB
        • SHA256 b7152b844a726d749148f8641a369b285c3514b0d2074b05ac05f0ff26d19d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ar.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ar.dll
        • Size 26KB
        • SHA256 a657697cc76bad942bf46365ed3f83dbd8266e3ddee0dfa3ea60fbe0919d3b33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_as.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_as.dll
        • Size 29KB
        • SHA256 bb3fb1696eea10090c76fe6c3b4c5c2edc1e1bb875ff9c0edbe18ba5912fb415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_az.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_az.dll
        • Size 29KB
        • SHA256 059bd31086ea8bd41e62075c7b6004afee85c1abbefdd5816f401ee5fe4fc193
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bg.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_bg.dll
        • Size 29KB
        • SHA256 0cdcb9b3ebe4d0d7e174764714451d36d4936613c2bb901d7f81f34e0fc7436b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn-IN.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_bn-IN.dll
        • Size 29KB
        • SHA256 f811343d108dea5c9cf298d0a2d4b478656063986eb7a90062dff907431c3149
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_bn.dll
        • Size 29KB
        • SHA256 a824cc3d179164ce5c00d0f918e03fc0dfcee6b0e356e035ea7f7ff7feb6f561
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_bs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_bs.dll
        • Size 29KB
        • SHA256 91b2f284d73e689c11422b99af8de613b22d19045f1fadd53da22068d8f8999d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca-Es-VALENCIA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
        • Size 30KB
        • SHA256 b1cf8b3d41666814112837ec684f7add1f4c0a239f8ec04cf8f84508ef1d2fa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ca.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ca.dll
        • Size 30KB
        • SHA256 71b8a6e35ab60da3574ccde19e6e5187d3c8f2e461f0fc1ae7797af425465ac2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cs.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_cs.dll
        • Size 28KB
        • SHA256 572301a19904baae43a4689f2d07c6f40546c9029e707a27d146b8281bbdf683
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_cy.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_cy.dll
        • Size 28KB
        • SHA256 f5e12ddb185180a893eec9cc5a219fea43b88878267dae55c91e8fe8933ea66b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_da.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_da.dll
        • Size 29KB
        • SHA256 a153a70c317ea9b284fae8f327bf4e79ba8a6bee25880309a8410ce0da5aa9fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_de.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_de.dll
        • Size 31KB
        • SHA256 c18524cd0dfe40f6fe64d20d7b10ba1a6949cb7a276754822681910e5dda4dba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_el.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_el.dll
        • Size 31KB
        • SHA256 457547a38d3baf768ae3a6c06f9f0f0db225ab143452eaf3f47ac784820bdd4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en-GB.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_en-GB.dll
        • Size 27KB
        • SHA256 168855873967005d97e65b46f4d224408bf71c9c075a2d0bf605b7bd0d5a2152
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_en.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_en.dll
        • Size 27KB
        • SHA256 a6cc41d56a25618b94689ac4ce708062f7d580757f3324ddce68dfb6c5893d40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es-419.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_es-419.dll
        • Size 29KB
        • SHA256 dbfe6054ec53b64b411783996d861cbac48cf1e9aa683ac3629bcf890dd2da06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_es.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_es.dll
        • Size 29KB
        • SHA256 285d04798745411343a2a123b2612c2a44f9f587902461134d289762b2b53cc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_et.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_et.dll
        • Size 28KB
        • SHA256 2321725570f2a363e7a3910e23b71939f2cf1a5e13f88833b54a1958a8d9a128
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_eu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_eu.dll
        • Size 29KB
        • SHA256 af1a688a727ead3ff4d606fd3db295e0baa746dab9ee4f7bab2f34a0645b7ede
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fa.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_fa.dll
        • Size 28KB
        • SHA256 9db94b7fd83746ad1ea7a17b977eea85ee46efa9e3723cba84361a84f48da8aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_fi.dll
        • Size 28KB
        • SHA256 6e5fe5d020a094f5fea56adb92fe396255016802c809dd4b147a09c18bd3aa13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fil.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_fil.dll
        • Size 29KB
        • SHA256 3513e8766f464283fc9f3c0b899060cb67daff5b349a82de1b042ceacbc03b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr-CA.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_fr-CA.dll
        • Size 30KB
        • SHA256 8a5120fb5d4b87c3e0080bf8b91ff8f0194d5d055af5e680327e84b319dc33b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_fr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_fr.dll
        • Size 30KB
        • SHA256 d9df0aa6396924cff053f793d08cfbe1a254a1652ad342402ef4c4931ab4a4b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ga.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ga.dll
        • Size 29KB
        • SHA256 f3aeb238024d1d15be5ad5fa4fe65b3c85389b5dc2581ca78211250ca846b20e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gd.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_gd.dll
        • Size 30KB
        • SHA256 0a2181bf1ad9177fdc7f7e36d8568c9d774288799b0fad2cc7e1583ab23db116
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gl.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_gl.dll
        • Size 29KB
        • SHA256 78e02fce82c64e8c08d76da63e3001306639be203ffaff0eda1a0e27e11d09ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_gu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_gu.dll
        • Size 29KB
        • SHA256 d23e5134e897a16ed5559bf1cd81fb15d762430d63a9f2af39492b9a7e219b3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_hi.dll
        • Size 29KB
        • SHA256 71dcebbe79116d9c6df5fa4416c80868a18dac38b55d7b0ef0650117bb06b51b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_hr.dll
        • Size 29KB
        • SHA256 078293848b885faed1f6914bc0c11d4afaf93059b50f38c70f2559835ad8de8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_hu.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_hu.dll
        • Size 29KB
        • SHA256 86e7ff3f449bb713c770c162331c6ecf087647751aac012507182a399c082a57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_id.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_id.dll
        • Size 28KB
        • SHA256 ce7752f3d7f633c9e545733b67b62afc071b0c9f9d78627ddef3ad77882232ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_is.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_is.dll
        • Size 28KB
        • SHA256 855395e3f91d4eaf0658bcdd8024df1e64f9b464f065bed3ed8db5b2d734660d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_it.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_it.dll
        • Size 30KB
        • SHA256 30d20962bdb020223f635aa454cad790d9da5325d5e3e80126e57536b22e251a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_iw.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_iw.dll
        • Size 25KB
        • SHA256 59fe8b431acdc8345cc15ef5423c2dc10d5138fb5e0b90743d571693362e6ae7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ja.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ja.dll
        • Size 24KB
        • SHA256 5403fb84f624a076fbef47fb634e3ca7410d986484648f0cbd3ff1e8ac426ddf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ka.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ka.dll
        • Size 29KB
        • SHA256 024ef56d53e2c02a8dba8bbb008ae353739a428072c6f0e67a5e6d2791c261c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_kk.dll
        • Size 28KB
        • SHA256 1f5bd4afd4d934fee5756ec568a9125d84514e06e62db1de399c3fe1f6cbcd38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_km.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_km.dll
        • Size 27KB
        • SHA256 8f1da8da2602e0249d9a36f8fa0c906f5c0dcd449c8784a16cd1bdf94ae48d25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kn.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_kn.dll
        • Size 29KB
        • SHA256 21789d5462f14c60d07ae37aeaa5209cba95eaa4505ccb6098cd0807cb412127
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ko.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ko.dll
        • Size 23KB
        • SHA256 351e1ca7762ac1c913ebe00c16c690a705e99ada7b8a60303df810e540b15ac5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_kok.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_kok.dll
        • Size 28KB
        • SHA256 b711eb2132709d9f76448963972097f59c7d4b9dc436e79a8218a2d57403e224
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lb.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_lb.dll
        • Size 30KB
        • SHA256 3c80bd33c213cd93b7c5212ecc2147a5a878294b86f16d5e10998eade28561b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lo.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_lo.dll
        • Size 27KB
        • SHA256 a59503a7130e73efe6a562ad67d100a3581ada2d0bfd6b6936541579a9f2a788
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lt.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_lt.dll
        • Size 28KB
        • SHA256 57f5413ff29b8ab2e1e4f8cd82757bf41766425fad17fa055b3cb9aa1e772dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_lv.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_lv.dll
        • Size 29KB
        • SHA256 b48f62e2420150e15b3c0c8d92ab2b5b6843779357ee9eb042f7707f1cb4a2e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mi.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_mi.dll
        • Size 28KB
        • SHA256 cfc9a8656fa1adf8fd3a4c0bf0ac1a7f6c9c22e322b4c96cb8868f0f52949203
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mk.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_mk.dll
        • Size 29KB
        • SHA256 876d475d3525fd6c629699ce16386c79bdb41f6106432e062a32cda383a04349
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ml.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ml.dll
        • Size 31KB
        • SHA256 bfa22c8fa7dde4f55ef2b2039dc05601dea98e6709b947a630a9513fd85574a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mr.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_mr.dll
        • Size 28KB
        • SHA256 d3d337219d2d0dbc9e74206def672f1acd05df391db13dd4b58386207c09e8d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_ms.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_ms.dll
        • Size 28KB
        • SHA256 f154cb94c6004f5e3523c72b6fa51d00e0657fcd0e73cb71a1d927ceaad4608c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgeupdateres_mt.dll
        • Path C:\Program Files (x86)\Microsoft\Temp\EUB9D5.tmp\msedgeupdateres_mt.dll
        • Size 29KB
        • SHA256 284b6f42dac79d34dae4ea1f149521eb38910d821578380a4ac4dee8002a3a27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdate.log
        • Path C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
        • Size 136KB
        • SHA256 32f1aba1cb9f335abbc6f5b05bb9959d83e5776f45eb93c596612b63e07e0e0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2944-184-0x00000000742E0000-0x0000000074507000-memory.dmp
        Download

        memory/2944-183-0x00000000009C0000-0x00000000009F5000-memory.dmp
        Download

        memory/2944-205-0x00000000742E0000-0x0000000074507000-memory.dmp
        Download

        memory/2944-221-0x00000000009C0000-0x00000000009F5000-memory.dmp
        Download